Threshold (FROST) custody for shielded ZEC: design check before a ZCG application

The intent is to change ZIP-312 to bring DKG into scope, mostly due to quantum recoverability, see ZIP 2005: Ironwood Quantum Recoverability , the idea is to also use C2SP/cocktail-dkg.md at main · C2SP/C2SP · GitHub for the DKG (draft PR) since it allows generating additional key material required for Zcash use, but that spec is still a draft and I’ve been providing feedback to it and it looks almost close to be deployable IMO.

The ZIP work was being done in https://github.com/zcash/zips/pull/895 , I need to try to get that moving again.

No one is working on this currently, but it should be easy. I might work on it in the upcoming future, IMO it’s nothing something worth being part of a grant proposal.

Look at the share recovery flow from COCKTAIL-DKG, that seems the way to go. IMO trusted dealer is kinda of useless since it defeats the main security gain of FROST (never having the key in memory ever)

Nothing that I am aware of.

I think the biggest challenge is simply the UI part of it all. In my mind the ideal solution would be to Zodl wallet to support FROST, but that might be tricky to write a grant proposal for. Other approaches might be do a specific wallet from scratch, or try with other wallet.

Also be aware that Zkool already supports FROST, though I am not a fan of their specific messaging approach which is neat but super slow (it uses the Zcash blockchain itself) and does not have the polished UI that Zodl has.

BTW, the messaging is also another tricky part, we have FROST server but for real world usage it needs integration with e.g. Tor; a full P2P solution would be best (but harder)

1 Like